I do not see SESSION vars when calling subdomain script with Jquery (ajax)

Question

I've got a problem. I hope you'll help me to solve it.

I'm creating chat with LONG POLLING. To keep main domain ajax requests (send message) untouched (unqueued), I had to put my long-polling script to subdomain. So I've got 2 "domains"

foo.cz channel.foo.cz

I do not mind about any Same Origin Policy right now as I put

header("Access-Control-Allow-Origin: *");

at top of that script. I also do use

ini_set('session.cookie_domain', '.foo.cz');

in all scripts (sending, receiving, chatting room).

For debugging, i've got this in my channel.foo.cz/getNews.php:

print_r($_SESSION);
print_r($_COOKIE);
die();

My problem is:

I do load chatting room
Ajax (jquery) requests channel.foo.cz/getNews.php
getNews.php returns this:

array()array()
It look that cookies and session isn't setted up. But! If I look into my FF cookie browser, I do see that domain for these cookies set in chatRoom is .foo.cz
If I try to copy ajax request uri and paste it into browser url, it returns me

array([username] => martin)array([SESSID] => some1D65a4s6d54asd)

How is that possible? Sorry for long question and thanks for all answers!

Ondřej Mirtes · Accepted Answer · 2011-05-22 17:57:20Z

1

You need to look at session_set_cookie_params function's third parameter. It sets the domain name where the cookie with SID is valid in.

answered May 22, 2011 at 17:57

Ondřej Mirtes

5,85128 silver badges39 bronze badges

Sign up to request clarification or add additional context in comments.

6 Comments

genesis Over a year ago

I said that there is ini_set('session.cookie_domain', '.bidmanie.cz'); When I look into FF cookie browser I see correct domain. I now noted that jquery DOES NOT SEND SESSION ID, so I'm receiving new session ID everytime!

Ondřej Mirtes Over a year ago

So it looks like rather some Javascript or jQuery bug.

genesis Over a year ago

I tried this: .ajax({timeout: 52000,headers: {Cookie: "PHPSESSID="+SSID},url:'channel.foo.cz/getNews.php?__='+SSID}); but request header doesn't change (no cookie: header specified)

genesis Over a year ago

BTW Ondeji, could you give me some contact, like Skype? I would like if you could help me directly, we're speaking in same language (CZ) ;)

Ondřej Mirtes Over a year ago

No, sorry. I don't like giving my private contact info, because you have much bigger probability of getting the answer if you ask on a public site like SO. Also, I like to answer questions voluntarily and not if I'm forced to by asking directly on IM. Thanks for understanding.

|

genesis · Accepted Answer · 2011-08-27 13:41:41Z

1

I've got it. Browser is restricting to send cookies to another subdomain So I have used iframe which is sending request to my subdomain. However, there were some problem when there were vanishing sessions. Solution? php.ini:

suhosin.session.cryptdocroot=Off

suhosin.cookie.cryptdocroot=Off

edited Aug 27, 2011 at 13:41

answered May 23, 2011 at 21:03

genesis

51.1k20 gold badges99 silver badges127 bronze badges

Collectives™ on Stack Overflow

I do not see SESSION vars when calling subdomain script with Jquery (ajax)

2 Answers 2

6 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

6 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related